Google: You Can Restrict XML Sitemaps Access To Search Engines
Google’s John Mueller said it is acceptable to restrict access of your XML Sitemaps to just search engines. So you can technically block humans from seeing your XML sitemaps but allow Google to access it.